SnapBay Privacy Policy

Welcome to SnapBay, a mobile application that helps you create eBay listings using AI-powered photo analysis. This Privacy Policy explains how SnapBay ("we," "us," or "our") collects, uses, stores, shares, and protects your personal information when you use our app and related services. We are committed to safeguarding your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information We Collect

We collect the following types of information to provide and improve SnapBay's functionality:

a. Information You Provide

• User Account Information: When you sign up or use SnapBay, we collect a unique user identifier (generated by us or derived from your eBay account) and, optionally, your email address to manage your account and subscriptions.
• eBay Authentication: We collect an eBay user ID and OAuth token to connect your eBay account for creating listings, as authorized by you via eBay's OAuth 2.0 flow.
• Purchase Information: For in-app purchases (e.g., Pro or Unlimited subscriptions, one-time listing boosts), we collect transaction details, including subscription IDs, purchase amounts, platform (Apple App Store or Google Play), and receipt data.
• Listing Data: We track the number of listings you create (initial and monthly counts) to enforce usage limits (e.g., 5 initial + 3/month for free users).

b. Information We Collect Automatically

• Analytics Data: We log events to improve the app, such as account creation, listing creation, feature usage (e.g., photo uploads, auction settings), and upgrade prompt interactions. This includes:
  • Event type (e.g., "user_registered", "listing_consumed").
  • Metadata (e.g., feature name, screen accessed, timestamp).
  • API usage (e.g., endpoint called, response time, number of eBay/AI API calls).
• Image Upload Metadata: When you upload photos, we collect metadata like original filename, uploaded filename, timestamp, file size, and content type. Images are temporarily stored in Google Cloud Storage (GCS) and deleted after eBay fetches them.

c. Information from Third Parties

• eBay: We receive your eBay user ID and OAuth token when you authorize SnapBay to access your eBay account for listing creation.
• Payment Processors: Apple App Store and Google Play provide purchase receipt data to verify subscriptions and one-time purchases.

2. How We Use Your Information

We use your information to:

• Provide Core Functionality: Create and manage eBay listings using AI-powered analysis, authenticate your eBay account, and enforce feature tiers (Free, Pro, Unlimited).
• Process Payments: Verify in-app purchases and manage subscriptions to unlock premium features (e.g., more photos, auctions).
• Track Usage Limits: Monitor listing counts (e.g., 5 initial + 3/month for Free tier) to ensure fair usage.
• Improve the App: Analyze usage patterns (e.g., feature access, API calls) to optimize performance and user experience.
• Communicate: Send support emails (for Pro/Unlimited users) or notifications about your account (e.g., subscription status).
• Comply with Legal Obligations: Handle data deletion requests from eBay or users, per GDPR/CCPA.

3. How We Store and Protect Your Information

• Storage: User data (e.g., user ID, email, tier, subscription details, listing counts) is stored in a secure PostgreSQL database hosted on our server in the United States. Image metadata is stored temporarily in GCS and deleted after eBay's Picture Services copies the images.
• Security: We use industry-standard measures, including:
  • HTTPS encryption for all data transfers.
  • Secure storage of credentials (e.g., database passwords) in environment variables.
  • Parameterized database queries to prevent SQL injection.
  • Limited database access to authorized processes only.
• Retention: We retain user data only as long as necessary to provide SnapBay's services or comply with legal obligations. Image metadata is deleted after eBay's fetch (typically within 24 hours). Analytics data is anonymized where possible.

4. How We Share Your Information

We do not sell your personal information. We share data only in the following cases:

• eBay: Your eBay user ID and OAuth token are used to interact with eBay's APIs for listing creation. Images are uploaded to eBay's Picture Services, where they are stored permanently.
• Payment Processors: Apple App Store and Google Play receive purchase data to process and verify in-app purchases.
• Service Providers: We use Google Cloud Storage for temporary image hosting and Deep Infra for AI processing. These providers receive minimal data (e.g., image metadata, AI prompts) and are bound by data protection agreements.
• Legal Compliance: We may disclose data if required by law or to respond to legal processes (e.g., court orders).

5. Data Deletion and Your Rights

You have the following rights regarding your data, subject to applicable laws (e.g., GDPR, CCPA):

• Access and Update: Request a copy of your data or update your account information via the app's settings.
• Deletion: Request deletion of your data by contacting us at support@snapbay.app. We also comply with eBay's Marketplace Account Deletion/Closure Notifications:
  • When eBay notifies us (via our notification endpoint) that you've deleted your eBay account or requested data deletion, we will delete your user data (e.g., user ID, email, subscription details, listing counts) from our PostgreSQL database within 30 days, unless required to retain it for legal purposes.
  • Analytics data is anonymized and retained for app improvement.
• Opt-Out: You can opt out of optional data collection (e.g., email for support) during signup.
• Portability: Request your data in a structured format (e.g., JSON export).

To exercise these rights, contact us at support@snapbay.app. We will respond within 30 days, as required by law.

6. Third-Party Services

• eBay: SnapBay uses eBay's APIs to create listings. eBay's privacy policy governs their handling of your data (e.g., user ID, listings, images stored on Picture Services).
• Google Cloud Storage: Images are temporarily stored in GCS and deleted after eBay's fetch. Google's privacy policy applies to their infrastructure.
• Deep Infra: AI processing for listings uses Deep Infra's Llama-4-Maverick model. Minimal data (e.g., image metadata, prompts) is sent, subject to Deep Infra's privacy policy.
• Apple/Google: In-app purchases are processed by Apple App Store or Google Play, subject to their respective privacy policies.

7. International Data Transfers

SnapBay's servers are located in the United States. If you use the app from outside the U.S., your data may be transferred to and stored in the U.S., subject to GDPR-compliant safeguards (e.g., standard contractual clauses) where applicable.

8. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The updated policy will be posted at https://snapbay.app/privacy-policy with a revised effective date. Significant changes will be notified via the app or email (for Pro/Unlimited users).

9. Contact Us

For questions, support, or data requests, contact us at: